Linux - NewbieThis Linux forum is for members that are new to Linux.
Just starting out and have a question?
If it is not in the man pages or the how-to's this is the place!
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Hi there,
I have a CentOS 7 workstation with few users. One of my users wanted to login locally but it always shows "An unknown problem". But the same user can login using ssh and can do stuffs he need to do. What should I do now?
The "last" utility shows the successful logins. What you want would be somewhere in /var/log/secure if your server is on CentOS. Don't post it here though, that would give too much information. The entries to look for would probably be from "sshd" so the interesting lines would be in the fifth column and start with sshd[ It should be viewable like this, using "awk" to extract and "less" to page the results, if you don't have too many entries:
Code:
awk '$5 ~ /^sshd/' /var/log/secure | less
Edit: that should show the successful logins. Try just less /var/log/secure to see all. Maybe there will be something in there to with the failed logins. What is the exact error message?
Last edited by Turbocapitalist; 10-19-2016 at 12:09 PM.
Thank you very much for your comments. Does it sufficient:
Code:
[zillur@genomics Results_Sep26]$ awk '$5 ~ /^sshd/' /var/log/secure | less | grep 'edgardo'
Oct 18 15:15:10 genomics sshd[23550]: Accepted password for edgardo from 136.145.188.41 port 51120 ssh2
Oct 18 15:15:10 genomics sshd[23550]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 15:26:16 genomics sshd[24317]: Accepted password for edgardo from 136.145.188.41 port 51560 ssh2
Oct 18 15:26:16 genomics sshd[24317]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 15:26:16 genomics sshd[24317]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 15:28:13 genomics sshd[24622]: Accepted password for edgardo from 136.145.188.41 port 51656 ssh2
Oct 18 15:28:13 genomics sshd[24622]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 15:28:14 genomics sshd[24622]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 18:02:50 genomics sshd[30717]: Accepted password for edgardo from 136.145.188.41 port 55781 ssh2
Oct 18 18:02:50 genomics sshd[30717]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 18:02:52 genomics sshd[30717]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 18:19:13 genomics sshd[31655]: Accepted password for edgardo from 136.145.188.41 port 56312 ssh2
Oct 18 18:19:13 genomics sshd[31655]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 18:19:13 genomics sshd[31655]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 19:33:01 genomics sshd[1782]: Accepted password for edgardo from 136.145.188.41 port 57750 ssh2
Oct 18 19:33:01 genomics sshd[1782]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 19:33:01 genomics sshd[1782]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 22:07:53 genomics sshd[23550]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 22:13:04 genomics sshd[9296]: Accepted password for edgardo from 136.145.188.41 port 61770 ssh2
Oct 18 22:13:04 genomics sshd[9296]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 22:23:22 genomics sshd[9843]: Accepted password for edgardo from 136.145.188.41 port 62150 ssh2
Oct 18 22:23:22 genomics sshd[9843]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 22:24:46 genomics sshd[9992]: Accepted password for edgardo from 136.145.188.41 port 62189 ssh2
Oct 18 22:24:46 genomics sshd[9992]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 22:53:37 genomics sshd[9992]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 22:53:37 genomics sshd[9843]: pam_unix(sshd:session): session closed for user edgardo
Oct 19 00:33:23 genomics sshd[9296]: pam_unix(sshd:session): session closed for user edgardo
Code:
[zillur@genomics Results_Sep26]$ less /var/log/secure
[zillur@genomics Results_Sep26]$ less /var/log/secure | grep 'edgardo'
Oct 18 15:15:10 genomics sshd[23550]: Accepted password for edgardo from 136.145.188.41 port 51120 ssh2
Oct 18 15:15:10 genomics sshd[23550]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 15:26:16 genomics sshd[24317]: Accepted password for edgardo from 136.145.188.41 port 51560 ssh2
Oct 18 15:26:16 genomics sshd[24317]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 15:26:16 genomics sshd[24317]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 15:28:13 genomics sshd[24622]: Accepted password for edgardo from 136.145.188.41 port 51656 ssh2
Oct 18 15:28:13 genomics sshd[24622]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 15:28:14 genomics sshd[24622]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 18:02:50 genomics sshd[30717]: Accepted password for edgardo from 136.145.188.41 port 55781 ssh2
Oct 18 18:02:50 genomics sshd[30717]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 18:02:52 genomics sshd[30717]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 18:19:13 genomics sshd[31655]: Accepted password for edgardo from 136.145.188.41 port 56312 ssh2
Oct 18 18:19:13 genomics sshd[31655]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 18:19:13 genomics sshd[31655]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 19:33:01 genomics sshd[1782]: Accepted password for edgardo from 136.145.188.41 port 57750 ssh2
Oct 18 19:33:01 genomics sshd[1782]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 19:33:01 genomics sshd[1782]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 22:07:53 genomics sshd[23550]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 22:10:14 genomics gdm-password]: pam_unix(gdm-password:session): session opened for user edgardo by (unknown)(uid=0)
Oct 18 22:10:29 genomics gdm-password]: pam_unix(gdm-password:session): session closed for user edgardo
Oct 18 22:13:04 genomics sshd[9296]: Accepted password for edgardo from 136.145.188.41 port 61770 ssh2
Oct 18 22:13:04 genomics sshd[9296]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 22:23:22 genomics sshd[9843]: Accepted password for edgardo from 136.145.188.41 port 62150 ssh2
Oct 18 22:23:22 genomics sshd[9843]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 22:24:46 genomics sshd[9992]: Accepted password for edgardo from 136.145.188.41 port 62189 ssh2
Oct 18 22:24:46 genomics sshd[9992]: pam_unix(sshd:session): session opened for user edgardo by (uid=0)
Oct 18 22:53:37 genomics sshd[9992]: pam_unix(sshd:session): session closed for user edgardo
Oct 18 22:53:37 genomics sshd[9843]: pam_unix(sshd:session): session closed for user edgardo
Oct 19 00:33:23 genomics sshd[9296]: pam_unix(sshd:session): session closed for user edgardo
Ok. The ssh logins are ok, but as mentioned above, it may not be so good to post the raw logs here.
You have the right idea with "grep" and "less" The more efficient way is to pipe "grep" into "less" rather than vice versa. grep something /var/log/messages | less
The next place to look would be /var/log/messages but without the error message, there is not much to go on.
You mention an error message. What is it? (Don't post the raw logs though)
Since you are physically at the machine with the error, maybe you can see if the console gives more information. You can try pressing ctrl-alt-f1 and that should give you a plain text console with a login prompt see if you can get in with that and if it gives an error. To get back to the graphical interface press ctrl-alt-f7 or ctrl-alt-f6 or one of the other function keys.
zillur@genomics Results_Sep26]$ grep 'edgardo' /var/log/messages
Oct 18 15:15:10 genomics systemd-logind: New session 1867 of user edgardo.
Oct 18 15:15:10 genomics systemd: Started Session 1867 of user edgardo.
Oct 18 15:15:10 genomics systemd: Starting Session 1867 of user edgardo.
Oct 18 15:26:16 genomics systemd-logind: New session 1870 of user edgardo.
Oct 18 15:26:16 genomics systemd: Started Session 1870 of user edgardo.
Oct 18 15:26:16 genomics systemd: Starting Session 1870 of user edgardo.
Oct 18 15:28:13 genomics systemd-logind: New session 1871 of user edgardo.
Oct 18 15:28:13 genomics systemd: Started Session 1871 of user edgardo.
Oct 18 15:28:13 genomics systemd: Starting Session 1871 of user edgardo.
Oct 18 18:02:50 genomics systemd-logind: New session 1891 of user edgardo.
Oct 18 18:02:50 genomics systemd: Started Session 1891 of user edgardo.
Oct 18 18:02:50 genomics systemd: Starting Session 1891 of user edgardo.
Oct 18 18:19:13 genomics systemd-logind: New session 1893 of user edgardo.
Oct 18 18:19:13 genomics systemd: Started Session 1893 of user edgardo.
Oct 18 18:19:13 genomics systemd: Starting Session 1893 of user edgardo.
Oct 18 19:33:01 genomics systemd-logind: New session 1903 of user edgardo.
Oct 18 19:33:01 genomics systemd: Started Session 1903 of user edgardo.
Oct 18 19:33:01 genomics systemd: Starting Session 1903 of user edgardo.
Oct 18 22:10:14 genomics systemd-logind: New session 1923 of user edgardo.
Oct 18 22:10:14 genomics systemd: Started Session 1923 of user edgardo.
Oct 18 22:10:14 genomics systemd: Starting Session 1923 of user edgardo.
Oct 18 22:13:04 genomics systemd-logind: New session 1924 of user edgardo.
Oct 18 22:13:04 genomics systemd: Started Session 1924 of user edgardo.
Oct 18 22:13:04 genomics systemd: Starting Session 1924 of user edgardo.
Oct 18 22:23:22 genomics systemd-logind: New session 1926 of user edgardo.
Oct 18 22:23:22 genomics systemd: Started Session 1926 of user edgardo.
Oct 18 22:23:22 genomics systemd: Starting Session 1926 of user edgardo.
Oct 18 22:24:46 genomics systemd-logind: New session 1927 of user edgardo.
Oct 18 22:24:46 genomics systemd: Started Session 1927 of user edgardo.
Oct 18 22:24:46 genomics systemd: Starting Session 1927 of user edgardo.
Oct 19 14:25:34 genomics systemd-logind: New session 2043 of user edgardo.
Oct 19 14:25:34 genomics systemd: Started Session 2043 of user edgardo.
Oct 19 14:25:34 genomics systemd: Starting Session 2043 of user edgardo.
Oct 19 14:26:18 genomics systemd-logind: New session 2044 of user edgardo.
Oct 19 14:26:18 genomics systemd: Started Session 2044 of user edgardo.
Oct 19 14:26:18 genomics systemd: Starting Session 2044 of user edgardo.
Oct 19 16:02:42 genomics systemd-logind: New session 2057 of user edgardo.
Oct 19 16:02:42 genomics systemd: Started Session 2057 of user edgardo.
Oct 19 16:02:42 genomics systemd: Starting Session 2057 of user edgardo.
Oct 19 16:25:16 genomics systemd-logind: New session 2060 of user edgardo.
Oct 19 16:25:16 genomics systemd: Started Session 2060 of user edgardo.
Oct 19 16:25:16 genomics systemd: Starting Session 2060 of user edgardo.
Oct 19 16:43:39 genomics systemd-logind: New session 2063 of user edgardo.
Oct 19 16:43:39 genomics systemd: Started Session 2063 of user edgardo.
Oct 19 16:43:39 genomics systemd: Starting Session 2063 of user edgardo.
Oct 19 16:55:28 genomics systemd-logind: New session 2065 of user edgardo.
Oct 19 16:55:28 genomics systemd: Started Session 2065 of user edgardo.
Oct 19 16:55:28 genomics systemd: Starting Session 2065 of user edgardo.
Oct 19 18:04:16 genomics systemd-logind: New session 2075 of user edgardo.
Oct 19 18:04:16 genomics systemd: Started Session 2075 of user edgardo.
Oct 19 18:04:16 genomics systemd: Starting Session 2075 of user edgardo.
Oct 19 18:04:40 genomics systemd-logind: New session 2076 of user edgardo.
Oct 19 18:04:40 genomics systemd: Started Session 2076 of user edgardo.
Oct 19 18:04:40 genomics systemd: Starting Session 2076 of user edgardo.
Oct 19 18:48:32 genomics systemd-logind: New session 2081 of user edgardo.
Oct 19 18:48:32 genomics systemd: Started Session 2081 of user edgardo.
Oct 19 18:48:32 genomics systemd: Starting Session 2081 of user edgardo.
ctrl-alt-f1 is not working (would you please to explain a little bit more).
I'm not really versed in gnome but I think there's an failsafe option you can use in gdm. It looks like your hardware might not be playing nicely with gnome.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
